Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
File: irW5qTaHl6hrrryB9iOz9OeG9Ro.mft (raw, json)
Hash identifier: ILsfx+ZDdL9bDOLv23bnwXHJZKlaO4aQmvvx1gsh78I=
Subject key identifier: 24:23:D0:5D:24:10:84:58:29:43:D3:51:B6:4E:4C:5A:04:8E:3C:20
Authority key identifier: 8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
Certificate issuer: /CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Certificate serial: 01967F4606F1426726EFC91386525CF47C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
Manifest number: 0969
Signing time: Tue 29 Apr 2025 02:00:17 +0000
Manifest this update: Tue 29 Apr 2025 02:00:17 +0000
Manifest next update: Wed 30 Apr 2025 02:00:17 +0000
Files and hashes: 1: 8Ztwq8Ff-jJd_sBf28s8lvQ9SqU.roa (hash: QWa/HtnKYiYQsWevU25s3knaSRBSQ+SLuyEHZRqaj0Q=)
2: irW5qTaHl6hrrryB9iOz9OeG9Ro.crl (hash: TojwaUJouL6XWGGCQY9plGFDnJGlUL76AKM+MgjM7tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:06:f1:42:67:26:ef:c9:13:86:52:5c:f4:7c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab5b9a9368797a86baebc81f623b3f4e786f51a
Validity
Not Before: Apr 29 02:00:17 2025 GMT
Not After : Apr 30 02:00:17 2025 GMT
Subject: CN=2423d05d241084582943d351b64e4c5a048e3c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:9b:a9:89:70:66:6f:98:8d:f5:1a:63:e0:
c0:dd:e5:d4:52:4c:c1:d8:2d:bd:c4:be:4a:9b:32:
e3:4b:bf:b1:57:2e:20:86:bd:75:03:e6:20:f4:75:
53:7e:87:1d:73:6f:92:2f:51:7d:84:2a:52:99:19:
40:4f:ae:bc:75:5d:9f:e6:51:ba:ce:2a:a5:ba:9c:
25:f8:fc:f9:87:29:58:5e:e6:ea:90:fe:f4:93:99:
81:fa:ff:67:d4:b4:e7:bb:6e:9d:09:78:d7:94:de:
1e:aa:6c:5a:dc:35:09:2e:7f:f1:34:7a:9a:cd:d3:
04:d3:cc:42:08:6a:8f:89:86:c1:18:1c:e1:80:42:
c1:70:8b:cb:ac:a9:ef:7d:9a:3a:50:4d:4d:bc:29:
41:c7:7b:bd:d0:75:82:7e:ce:b8:e4:12:4c:4a:f2:
98:54:80:5b:de:a1:08:5f:72:88:1c:dd:af:58:6e:
61:c6:dd:d3:b1:c7:7d:f9:55:e1:e7:c7:d9:19:60:
20:60:47:37:92:bd:99:84:a9:ec:51:84:6c:2d:fa:
24:f4:d2:1d:a4:3c:7b:9e:80:7d:3a:5e:44:25:92:
ff:a3:1c:2b:9f:f2:45:17:38:05:87:5e:c8:35:12:
ff:8d:d7:8e:79:49:84:dd:0e:90:5c:6a:c3:87:83:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:D0:5D:24:10:84:58:29:43:D3:51:B6:4E:4C:5A:04:8E:3C:20
X509v3 Authority Key Identifier:
keyid:8A:B5:B9:A9:36:87:97:A8:6B:AE:BC:81:F6:23:B3:F4:E7:86:F5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irW5qTaHl6hrrryB9iOz9OeG9Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/64c431-5330-437b-b207-28fecc63398c/1/irW5qTaHl6hrrryB9iOz9OeG9Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f1:02:59:5e:b3:ae:84:4e:46:d7:2b:dd:b4:35:e4:5a:02:
4c:48:ed:3c:e8:c2:1d:3d:bd:f0:0a:70:ce:45:0b:bb:86:03:
1b:a5:f9:5e:24:ff:09:1e:1d:39:3e:87:8f:0b:5b:03:3f:2f:
f1:9b:08:6d:2e:6e:71:2d:77:77:14:f8:ec:0d:c1:d5:34:58:
44:91:2c:24:f4:80:b0:2b:ce:00:fd:22:f5:b9:7b:46:4a:57:
37:8c:bf:87:21:1c:a8:0d:d5:97:d0:b1:99:b6:f6:db:b6:8d:
61:93:b0:42:cd:ac:f4:25:9f:c8:1d:73:8b:c3:13:26:79:80:
12:c6:22:62:65:f4:b8:e0:74:7d:95:d9:07:50:43:96:95:81:
4e:44:05:d0:0f:a3:c3:e0:ae:f0:06:83:ac:8b:a5:5c:fc:f1:
d7:e7:11:b4:21:8c:e2:73:df:d3:d5:6c:f8:6f:a1:a4:88:60:
19:56:b9:51:99:8b:1e:67:94:a4:73:72:fd:e4:ed:b9:bf:e1:
94:07:a1:da:77:02:00:35:1a:64:51:f1:65:3e:ef:6b:51:1e:
ac:03:31:54:48:a5:65:e6:a0:4b:cc:0e:12:f5:61:58:0a:c6:
6a:f2:d2:59:91:37:ac:12:2a:e2:cb:09:bd:00:64:a4:c5:21:
5b:65:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:25:47 2025 by rpki-client